openssl gendh during make install

Alan DeKok aland at
Fri Feb 19 13:05:53 CET 2016

On Feb 19, 2016, at 4:38 AM, Michael Ströder <michael at> wrote:
> Is it really necessary to invoke "openssl gendh" during "make install"?

  Yes.  The basic install process should create all of the certificates necessary to do basic testing.

> It wastes time on automated build systems, especially when building in VMs for
> armv6. After installing RPMs one would have to regenerate DH params anyway.

  The Debian and RPM packaging scripts don't create those certificates as part of "make install".  So there's no issue there.

  You can stop those files from being created by doing:

$ PACKAGE=yes make install

  Alan DeKok.

More information about the Freeradius-Users mailing list